Biometrics and

Authentication
Shivani Kirubanandan

Lets Define !
A biometric is a physiological or
behavioral characteristic of a human
being that can distinguish one person
from another and that theoretically can be
used for identification or verification of
identity.

Biometrics as Authentication
Authentication depends on

What you have

What you know
What you ARE !

Why Biometrics?
Identity thefts
Something you know can be
stolen
Predicted or hacked
Reliability on manual verification

Application Categories
Biometric applications available
today are categorized into 2 sectors
Psychological: Iris, Fingerprints, Hand,
Retinal and Face recognition
Behavioral: Voice, Typing pattern,
Signature

Biometric Authentication Process

Acquisition
Creation of Master characteristics
Storage of Master characteristics
Acquisition(s)
Comparison
Decision

The metrics of Biometrics

FTE Failure To Enroll

FTA Failure To Accept
FAR False Acceptance Rates
FRR False Reject Rates

Essential parameters

Liveness testing
Tamper resistance
Secure communication
Security Threshold level
Fall back node

Fingerprint recognition
Divides print into loops, whorls and
arch
Calculates minutiae points (ridge
endings)
Comparisons
authentication

Fingerprint techniques

Optical
Capacitive
Thermal
Ultrasonic

Disadvantages

Racial issues
Dirt , grime and wounds
Placement of finger
Too big a database to process
Can be spoofed liveness important!

Hand Geometry
Geometry of users hands
More reliable than fingerprinting
Balance in performance and
usability

Disadvantage

Very large scanners

Retinal Scanning
Scans retina into database
User looks straight into retinal
reader
Scan using low intensity light
Very efficient cant be spoofed!

Disadvantages
User has to look directly
FTE ratio high in this biometric
Acceptability concerns

Light exposure
Hygiene

Iris Scanner

Scans unique pattern of iris

Iris is colored and visible from far
No touch required
Overcomes retinal scanner issues
Contact lenses an issue?

Face recognition

User faces camera

Neutral expression required
Apt lighting and position
Algorithms for processing
Decision

Issues with Face Recognition?

Issues

Identification across expression

FRR or FAR fluctuate
Easily spoofed
Tougher usability
High Environmental impact

Behavioral
Voice
Signature
Typing pattern

Voice Recognition
Speech input

Frequency
Duration
Cadence

Neutral tone
User friendly

Disadvantages

Local acoustics
Background noise
Device quality
Illness , emotional behavior
Time consuming enrollment
Large processing template

Signature Recognition

Signature measures (dynamic)

Speed
Velocity
Pressure
Captures images (static)
High user acceptance

Issues

Signature variable with

Age, illness, emotions
Requires high quality hardware
High FRR as signatures are very dynamic

Typing Patterns

User typing pattern

Speed
Press and Release Rate
Unique patterns are generated
comparisons

Issues

Not very scalable

FRR is high
Can be spoofed by simple
technology (recorders)

Usability issues in Biometrics

User acceptability
Knowledge of technology
Familiarity with biometric
characteristic
Experience with device

Usability issues
Environment of use
Transaction criticality
Time consuming tasks

Biometric solutions

Educate
Train
Explain Interfaces
Use Trainers
Supervised Playtime

General issues
FTE posses problem
Biometric characteristics are not
encrypted
Trust on input device
Cannot authenticate computers!
Privacy attack?!

Current applications

Banks
Immigration facilities across USA
IDwidget interesting research
Eyegaze at Stanford

Class task
Sell your biometric product
Case1
A bank needs an appropriate
authentication mechanism to allow
remote user transactions. What kind of
multifactor system would you sell
them?

Class task
Case 2:
Suggest certain areas in which
biometrics would prove disastrous
Note- You may suggest a particular
combination of biometrics which may
be disastrous to security and privacy

Thank You!!